Global IT Platform Lead — Azure & Security

Group IT Manager

Department: IT

Employment Type: Full Time

Location: London

As Group IT Manager, reporting to the Head of IT and working closely with the Head of UK and Global IT Cybersecurity Consultant, you will oversee the global governance, delivery, and optimisation of the organisation’s IT platforms and services.

Working within a cloud‑first, Azure‑led environment, you will lead the design, standardisation, and continuous improvement of technologies including Azure, Azure Virtual Desktop, Microsoft 365, Intune, Entra , endpoint management, and cloud infrastructure.

You will ensure a seamless and secure digital workplace experience across all locations, with responsibility for platform governance, IT operations, identity and access management, endpoint governance, and service delivery within a globally standardised Azure environment.

The role also focuses on maintaining a globally aligned IT operating model, providing strategic direction and ensuring effective execution through regional IT teams, while ensuring platforms remain scalable, secure, resilient, and compliant with business and regulatory requirements.

We welcome applications from candidates who prefer to work fully office‑based, in a hybrid arrangement, or fully remote from a Langham Hall country location. Successful hire would be required to work within the European time zone. Applications welcome from candidates whose working locations are based in United Kingdon, Ireland, New York, Guernsey, Jersey and Luxembourg only.

• Own and govern the global Azure environment, ensuring performance, scalability, security, resilience, and cost optimisation.
• Lead Azure Virtual Desktop (AVD) globally, including architecture, operational standards, scaling, performance, and user experience.
• Define and enforce standards across Microsoft 365, Azure services, and core cloud platforms.
• Act as escalation point for critical platform issues, ensuring stability and availability.
• Drive automation, standardisation, monitoring, and continuous service improvement.

• Own IT services across all global offices, ensuring a consistent digital workplace experience.
• Define standards for collaboration tools, Microsoft Teams, conferencing systems, and meeting room technologies.
• Ensure alignment between global standards and regional execution.
• Improve IT service quality, responsiveness, and end‑user experience globally.

• Own global endpoint management via Microsoft Intune and Autopilot.
• Define device lifecycle standards including provisioning, configuration, patching, compliance, asset management, and retirement.
• Ensure all endpoints meet security, compliance, and Conditional Access requirements.
• Maintain global visibility and governance of all devices.

• Own Entra  including identity lifecycle, access control, governance, and access reviews. Enforce Zero Trust principles, MFA, Conditional Access, least privilege, and role‑based access.
• Improve privileged access management and identity security structures.
• Ensure compliance with audit, regulatory, and client requirements.

• Own global joiner, mover, and leaver processes.
• Ensure secure provisioning and deprovisioning across Entra , Intune, AVD, Microsoft 365, and business systems.
• Maintain audit‑ready compliance and a consistent employee experience.

• Own and govern security controls across all core IT platforms.
• Ensure alignment with cybersecurity frameworks, ISO 27001, ISAE 3402, DORA, and client assurance requirements.
• Lead or support major security incidents across platforms and regions.
• Support audits, risk assessments, control testing, and remediation tracking.
• Drive a strong global security culture.

• Own global disaster recovery and resilience strategy for cloud and IT services.
• Ensure redundancy, failover, backup validation, and cross‑region continuity. Lead DR testing, validation, and remediation activities.
• Align IT resilience with business continuity requirements.

• Define global connectivity standards…